CVE-2026-43171
MediumSummary
A vulnerability has been identified in the Linux kernel that has been resolved. The issue concerns the cper_print_fw_err() function, which does not check if the error record length is sufficient to handle the offset, potentially leading to malfunction in case of faulty firmware.
Risk Assessment
If this vulnerability is exploited, malicious software may take advantage of incorrect error record processing, potentially leading to the disclosure of sensitive data or system instability.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor systems for any irregularities in firmware behavior.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't dump the entire memory region The current logic at cper_print_fw_err() doesn't check if the error record length is big enough to handle offset. On a bad firmware, if the ofset is above the actual record, length -=